Add lib/security.js containing ipRangeRestrict middleware